codegpt-ai 1.1.0 → 1.2.0

package/ai_cli/updater.py

@@ -148,18 +148,64 @@ def force_update():
         return
 
     asset = exe_assets[0]
+
+    # Find checksum file in release assets
+    sha_assets = [a for a in release.get("assets", []) if a["name"].endswith(".sha256")]
+    expected_hash = None
+    if sha_assets:
+        try:
+            sha_resp = requests.get(sha_assets[0]["browser_download_url"], timeout=10)
+            # Parse certutil output: second line is the hash
+            lines = sha_resp.text.strip().splitlines()
+            for line in lines:
+                line = line.strip().replace(" ", "")
+                if len(line) == 64 and all(c in "0123456789abcdef" for c in line.lower()):
+                    expected_hash = line.lower()
+                    break
+        except Exception:
+            pass
+
     console.print(f"  Downloading {asset['name']} ({latest_tag})...")
+    if expected_hash:
+        console.print(f"  Expected SHA256: {expected_hash[:16]}...")
+    else:
+        console.print("[yellow]  WARNING: No checksum file found. Cannot verify integrity.[/]")
 
     try:
         resp = requests.get(asset["browser_download_url"], stream=True, timeout=60)
         resp.raise_for_status()
 
-        # Download to temp file
+        # Download to temp file and compute hash
+        import hashlib as _hashlib
+        sha256 = _hashlib.sha256()
         tmp = tempfile.NamedTemporaryFile(delete=False, suffix=".exe")
         for chunk in resp.iter_content(chunk_size=8192):
             tmp.write(chunk)
+            sha256.update(chunk)
         tmp.close()
 
+        actual_hash = sha256.hexdigest().lower()
+        console.print(f"  Actual SHA256:   {actual_hash[:16]}...")
+
+        # Verify checksum if available
+        if expected_hash and actual_hash != expected_hash:
+            console.print(Panel(
+                Text(
+                    "CHECKSUM MISMATCH — download may be tampered with.\n"
+                    f"Expected: {expected_hash}\n"
+                    f"Got:      {actual_hash}\n\n"
+                    "Update aborted for your safety.",
+                    style="bold red"
+                ),
+                title="[bold red]SECURITY ALERT[/]",
+                border_style="red",
+            ))
+            os.unlink(tmp.name)
+            return
+
+        if expected_hash:
+            console.print("[green]  Checksum verified.[/]")
+
         if _is_frozen():
             # Replace the running exe
             current_exe = sys.executable
@@ -172,7 +218,7 @@ def force_update():
             shutil.move(tmp.name, current_exe)
 
             console.print(Panel(
-                Text(f"Updated: v{current} -> {latest_tag}\nRestart to use the new version.", style="green"),
+                Text(f"Updated: v{current} -> {latest_tag}\nChecksum: {actual_hash[:16]}...\nRestart to use the new version.", style="green"),
                 border_style="green",
             ))
         else:

package/chat.py

@@ -589,9 +589,29 @@ def audit_log(action, detail=""):
 def is_shell_safe(cmd_text):
     """Check if a shell command is safe to run."""
     cmd_lower = cmd_text.lower().strip()
+
+    # Blocklist check
     for blocked in SHELL_BLOCKLIST:
         if blocked in cmd_lower:
             return False, blocked
+
+    # Block shell injection patterns
+    injection_patterns = [
+        r'[;&|`]',      # Command chaining/injection
+        r'\$\(',        # Command substitution
+        r'>\s*/dev/',   # Device writes
+        r'\\x[0-9a-f]', # Hex escapes
+        r'\\u[0-9a-f]', # Unicode escapes
+        r'\brm\b.*-[rR]', # rm with recursive flag (any form)
+    ]
+    for pattern in injection_patterns:
+        if re.search(pattern, cmd_text):
+            return False, f"blocked pattern: {pattern}"
+
+    # Max command length
+    if len(cmd_text) > 500:
+        return False, "command too long (500 char limit)"
+
     return True, ""
 
 
@@ -1978,10 +1998,11 @@ def run_shell(cmd_text):
         print_sys("Usage: /shell <command>\nExample: /shell dir")
         return
 
-    # Safety check — use the global blocklist
+    # Safety check
     safe, blocked = is_shell_safe(cmd_text)
     if not safe:
-        print_err(f"Blocked: dangerous command detected ({blocked})")
+        print_err(f"Blocked: {blocked}")
+        audit_log("SHELL_BLOCKED", f"{blocked}: {cmd_text[:80]}")
         return
 
     console.print(Panel(
@@ -1991,10 +2012,19 @@ def run_shell(cmd_text):
     ))
 
     try:
-        result = subprocess.run(
-            cmd_text, shell=True, capture_output=True, text=True, timeout=30,
-            cwd=str(Path.home()),
-        )
+        # Use shlex.split for safer argument parsing on non-Windows
+        if os.name != "nt":
+            import shlex
+            args = shlex.split(cmd_text)
+            result = subprocess.run(
+                args, capture_output=True, text=True, timeout=30,
+                cwd=str(Path.home()),
+            )
+        else:
+            result = subprocess.run(
+                cmd_text, shell=True, capture_output=True, text=True, timeout=30,
+                cwd=str(Path.home()),
+            )
         output = ""
         if result.stdout:
             output += result.stdout

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codegpt-ai",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Local AI Assistant Hub — 80+ commands, 29 tools, 8 agents, training, security",
   "author": "ArukuX",
   "license": "MIT",